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■* \ v /, -METHbD o TQ 'Control a process 

- invention is directed tp a method to control a 

process,' wherein'" the status of the process can be altered, 
by a multitude of action^, wherein the actiojg is. 
/. . :cpnt roiled by b^ basic . .. 

. 5 ' ' control unit is 'c.oprdinated^by a group -control unit . 

V. - - ■ • ; Such process control schemes . are .known ancl for 

example described in Ullmann' s Encyclopedia of Industrial 
Chemistry, Vol. B6, pages 416-427. 

A problem with such control schemes is that when 

10 applied for processes, which inherently have a risk of 

failure, and which require high safety measures a 
complicated safeguarding and control scheme is required. 
Such processes are generally controlled by process 
control schemes comprising more than one group control 

15 unit, each of which may have safeguarding measures 

according a certain -often extensive- decision tree for 
corrective actions that may be directed to the same 
action or conflicting actions depending the 
circumstances. Complicated control schemes result. 

2 0 Furthermore debugging and maintenance of such a system is 

found to be very laborious. For example a minor process 
adjustment or omission of a relevant failure mechanism 
may require a complete overhaul of the control scheme 
with its decision tree and corrective actions. 

25 US-A-5450346. disclose a method for the automatic 

control of batch processes by means of a process control 
in which the automatic control programs access individual 
control modules, wherein a) the control instructions and 
parameter definitions contained in the partial 
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formulations or phase's of the formulation program are 
: storfed in a separate program ldyel for the activation, 
interlocking and switch-on blpcking of actuators in the . 
-£sLeld, b) in the separate program level, the control 
instructions and "parameter definitions for. ea'ch actuator 
- to be. activated are coll^ected' actuator by actuator. and, 



if app'rojpriate, logically cbmbined, an*d c) the currently 
Sffectiye actiyat'iphs/ interlockings and switch-on 
blockings arV output, actuator by. actuator, to the 

10- process operating and monitoring system. 

A disadvantage of the method disclosed in 
US-A-545034 6 is that when applied on a complex process a 
complicated control scheme would result, having the 
disadvantages as also described above. 

15 The object of the present invention is to provide a 

method to control a process, which does not have the 
above disadvantage. 

This object is achieved with the following method. 
Method to control a process, wherein the status of the 

20 process can be altered by a multitude of actions, wherein 

the action is controlled by basic control units, wherein 
at least one basic control unit is coordinated by a group 
control unit and wherein this basic control unit 
comprises the following functions: 

25 (bl) means to receive and priority handle a request for a 

basic control action from one or more group control units 
or from the operator to be performed by said basic 
control unit, (b2) means to receive and transform 
information from the process and/or output from basic 

30 control unit(s) and/or output from group control unit(s) 

into a permit required to start or to continue to execute 
said action, (b3) means to receive lockouts from basic 
control unit(s) and/or from group control unit(s) and/or 
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. f rom the bp^^tor and/or f rom the basic' control , unit . 
\ " '.. itself to. prevent the start ox to initiate the 
. . "te rj^nation of said action and fp.rc| tlie default status 
* ^i:.. shut-dowa..sQguenc^ of v t&e "basic coritrol unit, until "the 
5 *> * received lo^kolit (Is) has thavfe) been remdveitf and~ also' a . \ 

-reset has been activated, (b4)"meahs to process. an' * ' 

• < - - ~ • v / ■■• ; • • - • - - .v .... 

^internal. .lockout and/or export an output or lockout/ 

, : ^jiich output /lockout is related to the status of " said 

adtiori andi (b5) means to execute said required action 

D according to a logic or sequence according to which the 

basic control unit operates, 

and wherein at least one of these group control unit 
comprises the . following functions : 

(gl) means to receive and priority handle a request for a 

5 group control action from an even higher hierarchy 

control unit or from the operator to be performed by said 
group control unit, (g2) means to receive and transform 
information from the process and/or from basic control 
unit(s) and/or from group control unit(s) into a permit 

0 required to start or to continue to execute said group 

action, (g3) means to receive lockouts from basic control 
unit(s) and/or from group control unit(s) and/or from the 
operator and/or from the group control unit itself to 
prevent the start or to initiate the termination of said 

5 action and force the default status or shut-down sequence 

of the group control unit until the received lockout (s) 
has (have) been removed and also a reset has been 
activated, (g4) means to process an internal lockout 
and/or export an output or lockout, which output /lockout 

0 is related to the status of said group action and (g5) 

means to execute said required group action according to 
a logic or sequence according to which the group control 
unit operates. 
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Because both group- control -units and. basic control 
• units have the same' ba$±b fuhctxQnality throughout the 
•^ole : of the process control' scheme becomes transparent 
. ... , -us^x.. - • " " ' ! - ' ' 

""Because ^he °fe&s £g ' c^fitrpX unit s.' fxSVe" ' a certain 
minimum, decision , tree for corrective actions the - group ... 
: ; :^pntrol unit, has' a much simpler decision tree for 

corrective actions , can handle much more functions , and 
.. .has an easier to alter control scheme. Suitably one gr^oup 
control unit coordinates more than one basic control 
unit. The method to control a process according to the 
present invention is. advantageously used in a process 
wherein at least one basic control unit is coordinated by 
at least two different group control units. 

The above control scheme is suitably used to control 
processes with a potentially high risk of hazards. 
Examples of such processes are gasification processes 
wherein synthesis gas is prepared by partial oxidation of 
a solid, liquid or gaseous (hydro) carbon containing feed. 
In such processes a feed is partially oxidised in the 
p resence Q f (pure) oxygen -which on itself contributes to 
a potential risk- to prepare a highly reactive product, 
namely a mixture of carbon monoxide and hydrogen. Thus it 
will be clear that in such processes the conditions 
during feeding of the oxygen and during gasification and 
the start-up and shut down sequence are carefully 
controlled in order to- avoid for example oxygen fires as 
well as full oxidation of the feed, release of the 
product to the environment or over heating of equipment. 

The invention shall be illustrated by making use of 
Figures 1-3. Figure 1 is a simplified process scheme of a 
gasification reactor and relevant feed lines and valves. 
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. - - Figure 2 is a : scheme illustrating ' the logic as. part 

of], a. basic control unit . . j . , 
— ... Figu5e^3 is an illustration of how one group control 
ninit controls, f bur., basic control units in. a gasification 
process of Figure" 1. 
- : . . * burner, 1" .of reactor 2 in "figure., If 'f^<j^Tine % .3 

lor -oxygen and 'a feecl line 4 for naturO. g^s is " 
' .connected. On oxygen feed line 3 means 5 to purge or 
■ route oxygen to the atmosphere is present. This purge 
action is controlled by basic control A operating 
valves A-l and A-2. To feed line 3 also means 6 to 
replace oxygen by high-pressure steam, means 7 to replace 
oxygen by nitrogen and means 8 to replace oxygen by air 
are present. The action of supplying or not supplying 
these gasses are controlled by respectively basic 
control B, basic control C and basic control D, which in 
turn operate as an action so-called Double Block and 
Bleed B-l, C-l, and D-l. 

On feed line 4 means 9 to purge or route natural gas 
to a safe location is present. Basic control E operating 
valves E-l and E-2 control this purge action. To feed 
line 4 also means 10 to add high-pressure steam to the 
natural gas and means 11 to replace natural gas by 
nitrogen are present. The action of adding or not adding 
these gasses are controlled by respectively basic 
control F and basic control G, which in turn operate as 
an action Double Block Bleed F-l and G-l. 

Basic controls A-G are in turn controlled by more 
than one group control units (not shown in Figure 1) . 

In addition to the above feeds a gasification process 
may also suitably comprise similar control units for the 
following process streams: natural gas and air to the 
auxiliary burner used for reactor pre-heating prior to 
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" the start of the gasification, water feed to. the waste 
heat boiler (synthesis gas cooling against steam 
production in unit downstream of the reactor 2) # water 
feed, fox ccLQJLing the burner*!, vent to heat .up stacks 
5 synthesis gas routing to the flare or. th4\ scrubber, and 

1 * s€eaum prcduction : in the.waste heat foilei:.. ' 

"V^v'V Figure 2 shows "a more detailed "description of basic- 
control C of Figure 1. Bksic control C has (bl) means to 
receive and priority handle a request for a basic control 

10 . action from one or more group control units or from the 

operator to be performed by said basic control unit. 
Possible actions which are suitably controlled by the 
basic control unit are controlling a Single Block (closed 
bleed) , or sequence controlling Double Block and Bleed 

15 (DBB) (none, standby or run) , and/or enabling/disabling 

control valves for Distributed Control System (DCS) 
functions (not shown) . The valve arrangement C-l, which 
is controlled by basic control C intends to stop/separate 
the nitrogen from the process at the absence of any 

20 manual or remote request, intends to prepare the nitrogen 

up to the last block (XV-163) at "manual standby" request 
only, and intends to have flow of the nitrogen to the 
process at "run" request, either by manual or remote 
request and regardless of "standby" request. When used in 

25 a certain sequence the manual "close bleed" request and 

the other manual requests are useful in verifying valve 
leakage rates (which is a safety issue) . Obviously for 
this latter use additional instrumentation (not shown) 
will be present. 

30 The basic control unit C will also comprise (b2) 

means to receive and transform information from the 
process and/or output from basic control unit(s) and/or 
output from group control unit(s) into a permit required 
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* 'to start or to \ continue. to execute said action. For °' 
~- example basic control unit 6 wiil not supply nitrogen to 
' the process when the gasif ication is ongdiiig, or wheri the 
nitrogen pressure is . too hi^h' (PZH-1Q6) or to low 
(PZL-160) or the" pressure differential across certain* 
valves ' £nd orifice (PDZL^i6"2T is not positive enough.. The 
.basic control unit C may .also, comprise (b3) means to 
receive lockouts from basic control unit(s) (not shown) 
and/or from group control unit (s) (not shown) and/or from 
the operator (shown) and/or from the basic control unit 
itself (not shown) to prevent the start or to initiate 
the termination of said action and force the default 
status or shut-down sequence of the basic control unit 
until the received lockout (s) has (have) been removed and 
also a "reset" has been activated. The basic control 
unit C will also comprise (b4) means to process an 
internal lockout and/or export an output or lockout, 
which output/lockout is related to the status of said 
action. For example the manual lockout (NLl60ago) is 
0 . shown as forwarded to a group control unit, and the 

output (160-BLOC) shown is the confirmation of the status 
of the block valves closed and bleed valve open as is 
forwarded to a group control unit. 

The basic control unit C will also comprise (b5) 
5 means to execute said required action according to a 

logic or sequence according to which the basic control 
unit operates. For example the bleed valve (XV-162) is to 
be confirmed closed before both blocks (XV-161/163) have 
permission to open. And the downstream block valve 
0 (XV-163) has delay to open (Delay Unit T05) to provide 

for pre-pressurisation (back-flow prevention) . And 
downstream block valve (XV-163) is to be confirmed closed 
before the bleed is allowed to open. 



WO 03/085467 . PCT/EP03/03594 

- 8 - 

' .■ •Optionally a "basic control unit will also comprise 
(b6) means to alarm* (Speaker) and (b7). means to indicate 
the effect of the controlled action. For\exampl'e the 
'gpntrolied action is to qpen a valve and supply nitrogen 
./.tola feed. line'. Means;. (b?j will indicate wjiether the; 
VVaTvea. &V^l$X/t&3J) ..are actually open and" the bleed valve . 
(XV-162) closed and nitrogen is actually being supplied 
as requested. 

The basic control unit as shown in Figure 2 has 
advantageously an alarm handling, i.e. when at alarm 
status the request to run is terminated the alarm is 
conveniently terminated as well. 

The basic control unit as shown in Figure 2 will 
provide the operator easy access to individual modules, 
and contains autonomous local valve function validation 
by means of indicators (1-10 as shown for valve XV-161) 
and alarm. 

Figure 3 shows how one group control unit (100) and a 
number of basic control units (A, C, E, H) control the 
0 gasifier start and stop sequencing. The group control 

unit is the Start-up/shutdown sequence control 
unit (100) . The basic control units are the natural gas 
feed control (E; Figure 1) , the oxygen feed control (A in 
Figure 1) and the low pressure purge feed control (C in 
5 Figure 1) and the effluent /syngas routing control 

unit (H) . For clarity reasons some basic control units 
are not shown in Figure 3, such as controls B and F of 
Figure 1 . 

The Start-up/shutdown sequence control unit (100) 
0 acts as the operator interface for the fully automated 

sequenced start-up and shut down of the gasification in 
the reactor (2). This may be performed controlled (via 
Distributed Control System) and safeguarded (via 
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Emergency Shut Dowh : system). Basically the group, control 
*un±t (100) controls that a sequence of actions xp . 
jf@¥f6rmed whfl£ checking if the correct: "feed is! fed to 
. "V* \ '%¥i<d burner; b^fo.rie proceeding to the next action. If the.. 
5 feedback regarding the cbrc'&pt feed and valye positions 

(<5t : hfer permits) is ribt areceiv^'by unit (TOO) wi€ftin a: 
7 required time, control unit (100) aborts the start-up 
sequence and starts the shut down sequence. 

In figure 3 the following acronyms have the following 

10 meaning: 

PDT= pressure differential transmitter 

GBS= proximity limit switch from valve 

HZ= manual lock out 

R= manual' reset 
15 HS= manual request selection 

XT= instrument signal transmitter 

FT= flow instrument signal transmitter 

ESD= emergency shut down 

TT= temperature instrument signal transmitter 
20 PT= pressure instrument signal transmitter 

In Figure 3 it is shown that Group control unit (100) 
is provided with (gl) means to receive and priority 
handle a start/stop request (104). Group, control 
unit (100) is further provided with (g2) means to receive 
25 and transform information from the process and/or from 

basic control unit(s) (e.g. Unit E and A in Figure 3) 
and/or from group control unit(s) into a permit required 
to start (101-103) or to continue (107-110) to execute 
said group actions. 
30 Group control unit (100) further provided with (g3) 

means to receive lockouts from basic control 
unit(s) (105) and/or from group control unit(s) and/or 
from the operator (HZ or ESD) and/or from the group 
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control unit itself (122) to prevent the start/or to 
- initiate the termination of said action and f orce the • 

default status or shut-down s.equence of. the group control 
-^£t until " the received lockout <s) has (have) ' be.en. 
5* removed and also a reset (R) has been activated. 

- -.Group' control unit (100) further provided. with (g4) . 
; .means (111) to process an internal lockout (122) and/or 
export an output or lockout (121), which output/lockout 
is related to the status of said group action and* (g5) 
10 means (110) to execute said required group action 

according to a logic or sequence according to which the 
group control unit operates to control the basic control 
units via (112) -(120) . 

Basic control unit (E) is provided with (bl) means to 
15 receive and priority handle a remote request (112) for a 

basic control action from the group control unit or from 
the operator (HS) to be performed by said basic control 
unit, (b2) means to receive and transform information 
from the process (PDT, GBS) and/or output from basic 
20 control unit(s) and/or output from group control unit(s) 

into a permit required to start or to continue to execute 
said action (142), (b3) means to receive lockouts . (139) 
from the group control unit and/or from the operator (HZ) 
• and/or from the basic control unit itself (see for 
25 example control unit A and reference number 107) to 

prevent the start or to initiate the termination of said 
action and force the default status or shut-down 
sequence (142) of the basic control unit E until the 
received lockout (s) (139, HZ) has (have) been removed and 
30 also reset (R) has been activated, (b4) means (143 or 154 

for unit A) to process an internal lockout and/or export 
an output or lockout (147 ) , which output/lockout is 
related to the status of .said action and (b5) means to 
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• * . - - " ' ' " * * 

execute said required action .according to a logic or 
sequence (142) according to whicli the basic control unit 
. operates.. * - . 

■ -•fasic cdntrpl.ui^t (A) , (G) and (H) as shown in - 

5 Figure 3 have . the same functionalities as basic control 

unit (E) described above/ wherein the reference numbers 
. . v -- used refer to. the following f unctioVis./Sictions :. . 

- Run permit (149), Lockout reset (150), Request 
selection (151), Valve sequence processor (153), Process 
10 evaluation and response delays (154), Enable DCS flow 

control (155), Double block and bleed valves (156), Run 
effective 02 (157), Run alarm 02 (107), Run permit (159), 
Stack permit (123), Lockout reset (125), Request syngas 
to flare (127), Request syngas to scrubber (128), Valve 
15 sequence processor (129), Priority selection (130), 

Enable DCS pressure control on valve (131) , DCS 
enable/disable valves (132), Run effective to 
flare (133), Run alarm to flare (134), Run effective to 
stack (135), Run alarm to stack (136) and run effective 
20 to scrubber (137) . 

The status of a basic control unit (C) (NITROGEN 
PURGE TO OXYGEN LINE) may suitably be provided to an 
operator via a screen. By means of indicators (201-210) 
on a computer screen dedicated to a single basic control 
25 unit the operator will be provided with information about 

the valve positions, requests, lockouts etc. in an easy 
to understand manner. 

Applicants found that when the above safeguarding and 
control scheme is applied especially to a gasification 
30 process safety and reliability of the process is 

improved. Further, more operator tasks can be handled by 
the safeguarding and control scheme than practical in the 
past. It appears that the on-stream time can be improved 
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in. a cost effective manner while avoiding trips of a. hon 
r safe nature. The scheme also makes the complex system of 
control and safeguarding more transparent, Furthermore a 
v high degree of automation can be achieved during start- 
5 up, shut down and operation. 



